1.1 KiB
Phase 1.0AS: offline channel primitive and FD ownership audit
Status: PIPE_POLL_CANDIDATES_PRESENT_FD_INHERITANCE_AND_HARD_DEADLINE_BLOCKED
Date: 2026-07-29
Current official SDK declarations and shsrv call sites make pipe and poll
public-source candidates. The shsrv telnet loop uses a short relative poll, but
does not compose it with an absolute monotonic deadline, EINTR budget
recalculation or bounded worker reap.
The decisive ownership mismatch is in worker creation. The official header
defines RFFDG as copying the descriptor table and RFCFDG as closing every
descriptor. Current shsrv workers use RFCFDG; a pre-created result pipe would
therefore not be inherited. No reviewed worker path uses RFFDG with exclusive
parent/child pipe-end closure or close-on-exec handling.
Headers alone do not prove that a new composition is safe on firmware 9.60. The next phase may model FD acquisition, inheritance, close ordering, EINTR and an absolute deadline using fake operations only. No live channel, target source, build or device action is authorized.